CVE-2024-39594

Publication date

2024-07-09 04:10:40

Family

sap

State

PUBLISHED

Description

SAP Business Warehouse - Business Planning and Simulation application does not sufficiently encode user controlled inputs, resulting in Reflected Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can cause low impact on the confidentiality and integrity of the application.